What were the notable Arch Linux updates?

Arch Linux kernel v7.1.3-arch1, Merge tag 'mm-hotfixes-stable-2026-07-06-17-49' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm, and update nix to 2.34.8-1 in extra-x86_64.

@archlinux

The Arch Linux org - the rolling distro and the developers who run it

github ↗

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

ARCH KERNEL 7.1.3 LANDS WITH CRITICAL FIXES FOR AMD, INTEL, AND NAMESPACES

By RepoJournal · Filed 06:02 UTC on July 7, 2026 · About Arch Linux

Arch's patched 7.1.3 kernel ships four key security and stability fixes that address GPU deadlocks, display pipeline issues, and unprivileged namespace creation.

The Arch Linux kernel v7.1.3-arch1 [1] is now available and applies directly on stable with targeted patches that matter. The most critical: a new sysctl to disable unprivileged CLONE_NEWUSER, closing a longstanding attack surface for privilege escalation. GPU drivers get relief too. The AMD display subsystem gets a fix for the ISM dc_lock deadlock that could freeze suspend operations [1], while Intel's Meteor Lake platform now properly enables PPS before PLL to prevent initialization failures [1]. A companion udmabuf security fix prevents malformed scatterlists from crashing the kernel [1]. Meanwhile, upstream is already working the next wave: Andrew Morton's mm hotfixes tag [2] includes 20 patches with 12 marked stable, addressing post-7.1 regressions and old DAMON issues that will eventually flow downstream. In the userspace stack, Nix 2.34.8 [3], ocicl 2.17.0 [4], and NetHack 5.0.0 [5] are staging in testing repositories. The signstar team also bumped the aes-gcm cryptography crate to 0.11.0 [6] to keep encryption dependencies current.

Action items

→ Update to kernel 7.1.3-arch1 before next reboot - the namespace fix is important for multi-user systems archlinux/linux [plan]
→ If running AMD or Intel recent GPUs, prioritize this kernel - suspend and initialization failures are now fixed archlinux/linux [plan]
→ Monitor mm hotfixes tag for stable patches - expect more backports in 7.1.4 archlinux/linux [monitor]

References

[1] Arch Linux kernel v7.1.3-arch1 ↗ archlinux/linux
[2] Merge tag 'mm-hotfixes-stable-2026-07-06-17-49' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm archlinux/linux
[3] update nix to 2.34.8-1 in extra-x86_64 archlinux/state
[4] update ocicl to 2.17.0-1 in extra-x86_64 archlinux/state
[5] update nethack to 5.0.0-1 in extra-testing-x86_64 archlinux/state
[6] fix(deps): Update Rust crate aes-gcm to 0.11.0 archlinux/signstar

Quick answers

What shipped in Arch Linux on July 7, 2026?: Arch's patched 7.1.3 kernel ships four key security and stability fixes that address GPU deadlocks, display pipeline issues, and unprivileged namespace creation. In total, 53 commits and 1 releases landed.
What were the notable Arch Linux updates?: Arch Linux kernel v7.1.3-arch1, Merge tag 'mm-hotfixes-stable-2026-07-06-17-49' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm, and update nix to 2.34.8-1 in extra-x86_64.

AURWEB PLUGS EMAIL VALIDATION LOOPHOLE AS PACKAGE REPO TRIMS CRUFT

The AUR web backend just closed a registration flaw that could let attackers bypass email uniqueness checks using Gmail dot-notation tricks, while the main repository purges two stalled packages.

infra 53 shipped 1-min read

@archlinux 2 days ago

ARCH LINUX KERNEL 7.1.5 LANDS WITH SECURITY AND STABILITY FIXES

The Arch Linux kernel team shipped v7.1.5-arch1, patching critical GPU deadlocks and unprivileged namespace vulnerabilities in one of the distribution's most closely watched packages.

infra 55 shipped 1-min read

@archlinux 3 days ago

LINUX-LTS CLEARS TESTING, ARCHINSTALL FIXES ARM64 GRUB AND LIMINE

Linux-LTS moved from core-testing to stable across x86_64 after validation [ref:1], while archinstall patches critical EFI installation failures on aarch64 that broke both GRUB and Limine [ref:10].

infra 60 shipped 1-min read

@archlinux 4 days ago

KEYCHAIN 3.0 LANDS IN TESTING, ARCHINSTALL TIGHTENS VALIDATION

Arch's package repos are moving fast: keychain climbs to 3.0.0, Deno reaches 2.9.4, and archinstall ships critical validator fixes across Pydantic models.

infra 62 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.